Method and apparatus for providing identification

ABSTRACT

A method of providing identification of an individual including:
         maintaining a database of identification data specific to the appearance and/or condition of individuals;   providing a unique description for each individual enabling access to the individual&#39;s identification data in the database, and   providing identification means ( 10 ) adapted for portage with the individual and containing the unique description.

BACKGROUND OF THE INVENTION

This invention relates to a method of and apparatus for providingidentification. This invention has particular but not exclusiveapplication to a method of and apparatus for identifying persons andunique articles which retain a lifelong distinctive identity such aspaintings and other objects of art. Such persons and articles arehereinafter collectively referred to as “an individual or individuals”.In other aspects the invention may be used for identifying freightablearticles such as shipping containers, motor vehicles or the like.

Positive identification of individuals is important for preventingunauthorized access to or passage from selected locations or facilitiessuch as banks, accounts, etc. and restricted areas such as securebuildings and airport terminals and the like. Positive identification ofindividuals is particularly important for making Government leveldecisions concerning travelers access to countries, especiallyinternational travelers.

International travelers are often subjected to disruptive and excessivedelays upon arrival at and/or departure from airport terminals asofficials attempt to establish the bona fides of each traveler bymanually interrogating each traveler and comparing the person beinginterrogated with the available identification such as passports, memorylists and computer files and the like, with the aim of identifying anytraveler who is unauthorized to enter the country or whose details areon lists of restricted individuals. This entry check is also utilized torecord details of movement of travelling individuals to and from eachcountry visited.

The presently available methods of positive identification of anindividual typically include passports, knowledge of restrictedinformation, such as a password, possession of a restricted article,such as a pass key, or physical appearance of the individual asportrayed in a reference photo.

Security based upon knowledge of restricted information or possession ofa restricted article may be compromised without discovery since theinformation may be obtained from its rightful owner. Consequently suchinformation does not provide a satisfactory method for positiveidentification of an individual in all cases, particularly where suchidentification has to be made quickly.

Methodologies relying on physical appearance, commonly referred to asbiometric techniques such as fingerprint analysis, thermograms and DNAanalysis are considered less vulnerable to mistaken identity andtherefore am attractive to authorities but to date have been difficultto utilize successfully. Mostly such methodologies require a vastdatabank containing the particular biometric data which may be difficultand/or slow to locate and access.

One known method of utilizing biometric techniques for identification ofan individual for the purpose of restricting entry to an area toauthorized persons only, includes providing each of the authorizedindividuals with a card containing biometric data specific to eachindividual. The card can be proffered at a reading station wherein thebiometric data is read by a card reader or the like and compared withthe individual proffering the card. A high correlation between the carddata and the contemporaneously acquired data of the individualproffering the card results in access and a low correlation causes arefusal. This system however does not prevent unauthorized cards beingproduced which may be used for gaining unauthorized access to afacility.

Another known method includes comparing the biometric data on a cardproffered by an individual to a previously created database of biometricdata of authorized individuals. Such a system can be foiled byindividuals who have obtained a card from its rightful owner.

SUMMARY OF THE INVENTION

The present invention aims to alleviate at least one of the abovedisadvantages and to provide a method of and apparatus for providingidentification which will be reliable and efficient in use.

With the foregoing in view this invention in one aspect resides broadlyin a method of providing identification of an individual or afreightable article including:

-   -   maintaining a database of identification data specific to the        appearance and/or condition of the individuals or freightable        articles;    -   providing a unique description for each individual or        freightable article enabling access to the individuals' or        freightable articles' identification data in the database; and    -   providing identification means adapted for portage with the        individual or article and containing the unique description.

The identification data contained in the database may be datarepresentative of an identifiable attribute and preferably includesbiometric information such as thermograms, fingerprints, photographs,voice prints, DNA sequences or the like. Preferably the biometricinformation is information which may be obtained noninvasively andsuitable information which can be obtained or captured by imaging anindividual or article from a remote location. If the individual orarticle is not a living organism then other identifiable attributes suchas surface images or acoustic response patterns may be utilized and thedata representative of these attributes may be updated from time to timeto take account of deterioration or changes in the article.

Preferably the database contains one protected parcel of identificationdata in respect of each individual or freightable article. The protectedparcel of identification data may be representative of more than oneidentifiable attribute such as thermogram and fingerprint. Each parcelmay be associated with one or more add-on only files which may recordhistorical or other information, for example, medical details such asblood group in the case of an individual or proprietorship, manufactureretc. in the case of a freightable article.

The database may be arranged to check existing data prior to approvingentry of an identifiable attribute pertaining to an individual orfreightable article so as to ensure that data specific to eachindividual or article is linked to one unique description only and/ormay be arranged to continuously scan the data checking for any matchesor defined similarities which may indicate the existence of more thanone description for an individual or article, that is, a forgery.

The unique description may be any information or data such as an addressin a database and sufficient to isolate a file in respect of anindividual or article in a database and may include an individuals name,date of birth, nationality or like characteristics. Preferably howeverthe unique description is a unique file code assigned to the individualor article. The unique description may be arranged according to aninternational standard so as to enable positive identification ofindividuals or articles such as shipping containers on a global basis.

Preferably the unique description is machine readable only and of a typewhich may be protected by protection means. The protection means may bean encoding or encryption of the unique description or it may be orinclude a secure access code or style.

Preferably the identification means is an identification device asdescribed hereinafter. However, the identification means may be anyother suitable means such as for example, a number or code to bememorized by each individual and proffered to obtain access to theidentification data in the database.

In another aspect this invention resides broadly in an identificationdevice including:

-   carrier means, and a unique description carried by the carrier    means.

The carrier means may be a card, token, plaque or the like and theunique description may be included thereon in any readable form.Preferably the unique description is machine readable from a remotelocation. For example, the unique description may be readable by aremote imaging system or laser or infra red radiation scanner or thelike. Preferably, the identification device is responsive to a radiofrequency signal wherein the unique description is transmitted forreceipt by a remote receiving station.

The carrier means may carry information other than the uniquedescription. For example, it may carry information as to which one ofseveral databases contains the identification data for the particularindividual or article under scrutiny thereby allowing a reading stationto quickly locate the relevant database. Such additional information mayalso be transmitted with the unique description. Preferably however, thecarrier means suitably carries no information of value to any individualother than the individual in respect of whom it was issued or thearticle in respect of which it was issued. Only the means enablingaccess to be gained to the identification data in respect of thatindividual or article. Similarly, transfer of an identification deviceissued in respect of a particular article to another article serves nouseful purpose.

The identification device may also include distinguishing means by whicha receiving station can distinguish the identification device from othercommonly carried programmable cards and like devices. In a preferredform of the invention the distinguishing means includes a built-in timedelay wherein other devices transmit their signals prior to transmissionby the identification device thereby enabling a receiver to distinguishthose signals from the signals transmitted by the programmable cards andthe like from those transmitted by the identification device andaccordingly discard them.

The identification device may include access means adapted to provideaccess to the receiving station such that the receiving station preparesitself to receive the unique description only after being opened by theaccess means. For example, the access means may include a specificsignal stream recognized by the receiving station. The identificationdevice may further include validation means for checking the validity ofthe information contained in previous signals. Preferably the validationmeans is arranged such that any tampering with the unique description orother information contained in the identification device or anytampering with components of the identification device will result inthe identification device being flagged for investigation and at thesame time allow receipt of any available information by the receivingstation for storage at the receiving station in the add-on only file.

The identification device may also include encryption means whereininformation transmitted from the identification device to a receivingstation may be understood only by a receiving station utilizingcorresponding decoding means.

In a preferred form of the invention wherein the carrier means is acard, identification data specific to each card issued is maintained ina database which may be suitably linked associated with a databasecontaining identification data specific to the individual to whom thecard was issued.

Such card specific data may for example include a pattern orornamentation applied to a face of the card and readable by imagereading equipment. Alternatively, the card specific data may be anindividual signal contained in a transponder and readable from a remotelocation.

In another aspect this invention resides broadly in a method offacilitating travel of an identifiable group of individuals presentlyidentified or to be identified as previously described, including:

-   -   accessing the database or databases at or after an indication by        an individual of the group of an intent to travel,    -   accessing being enabled using the identification means;    -   compiling a packet of identification data in respect of the        identified group of individuals;    -   retrieving the packet or data to a localized monitoring area at        which said identified group are assembled or confirm their        intention to travel;    -   comparing data of each individual in the retrieved packet of        information with corresponding data generated at the localized        monitoring area, and    -   permitting individuals with an operative correlation of data to        continue on their travels.

This method provides the advantage that relatively large databases maybe interrogated quickly either before travel or during confinement ofthe group for a prolonged travel period, to assemble a relatively smallpacket of data which may be readily localized to permit almostinstantaneous positive identification of individuals in the group to beachieved and thereby facilitate their movement across restrictedborders.

The database may be an international database. Preferably however, eachcountry maintains a national database containing information in respectof citizens of that country. Each national database may also includeinformation in respect of foreign citizens who have previously enteredeach respective country, thereby providing easy access to data inrespect of those persons who frequently travel to and from a particularcountry. This may be contained in the add-on only file. The database ordatabases may be accessed upon instructions from the departure stationor the destination station. The national databases may also include arestricted individuals database, containing identification data inrespect of individuals who are restricted from entering or leaving thecountry by court order or who are known criminals or the like. Allmembers of the group may be quickly compared against such a database.

The packet of identification data may include parcels of identificationdata in respect of each member of the identified group of individualsand may relate to any group of individuals. A group may include allpassengers ticketed for a particular vehicular movement such as aflight, train or bus journey, voyage or the like. In a preferred form,the identification data includes the identification data specific toeach individual, such as the individual's thermogram, with travelinformation such as travelling companions and seat allocation beingprovided in the add-on only files. This may provide information and anaudit trail which officials may use to readily identify usefulinformation concerning an individual. This is particularly advantageousif one individual is identified as being unauthorized.

The packet of identification data compiled may include data taken fromeach individual's identification means and other information provided bythe individual. However, in a preferred form of the invention, theidentification data includes date specific to each individual which isretrieved from the database.

Preferably, the packet of data is compiled at the departure station,although it may be compiled at the national database or another suitablecompiling station and be transmitted to a monitoring station for storagein a temporary storage means.

Preferably, the packet of data is transmitted in an encrypted form so asto prevent interference from unauthorized persons.

The localized monitoring area may be a monitoring station located at adeparture airport or a destination airport or any other suitable stationand the packet of data may be retrieved at one or more monitoringstations. In a preferred form of the invention the packet of data iscompiled at the departure airport where it is temporarily stored andretrieved for comparison with departing passengers and also transmittedto the destination airport for comparison with the passengers as theyarrive.

Preferably the identification means carried by each individual includesa unique description which is readable from a remote location aspreviously described. Such identification means provide an individualwith the necessary means enabling passive confirmation of theindividual's identity by being monitored remotely and compared with theidentification data in the database. Alternatively, individuals may berequired to present their respective identification means to a reader ata transit or monitoring station for monitoring purposes.

Whilst the individual could be compared visually by an operator withidentification data in the form of an image retrieved automatically fromthe database upon reading the identification means at the monitoringstation, it is preferred that the comparison be a non-subjectivecomparison performed mathematically or electronically such that humanerror or purposeful wrongdoing is avoided.

In a preferred form of the invention the identification data is athermogram which may be compared with the corresponding passenger by anysuitable means such as those disclosed in U.S. Pat. No. 5,163,094 toProkowski.

In another aspect this invention resides broadly in a method offacilitating movement of freightable articles such as shippingcontainers including:

-   -   sealing said article with an identifiable sealing means which        must be damaged in order to obtain access to said article;    -   entering information in relation to said sealing means and/or        said article into said database;    -   checking said sealing means at a monitoring station to determine        whether the article has been accessed;    -   retrieving the data to two localized monitoring areas at which        said article is stored;    -   comparing retrieved data in respect of the article with        corresponding data generated at the localized monitoring area,        and    -   permitting articles with an operative correlation of data to        proceed to destination without inspection.

Preferably, the freightable article is identified according to themethod of providing identification previously described. It is alsopreferred that the database is accessed at a time on or after allocationof the article to an identifiable shipping movement to enable positiveidentification of the article.

Preferably, the identifiable sealing means is an identification deviceas previously described and which has been suitably formed forattachment to an article in such manner that the device must be brokenin order to gain access to the contents of the article. It is alsopreferred that the identifiable sealing means has a unique sealdescription included thereon in a readable form. For example, the uniqueseal description may be an array of numerical characters which issufficient to isolate a file in respect of an individual seal and/or anindividual article. The identifiable sealing means may also includeunique seal specific data such as a pattern or ornamentation applied toa face of the sealing means and readable by image reading equipment.

Alternatively, the seal specific data may be an individual signalcontained in a transponder and readable from a remote location.

Suitably, the sealing means contains no information of value to anyindividual, only the means enabling access to be gained to theinformation relating to the sealing means and the article to which it isapplied in the database. In a preferred form of the invention suchaccess will only be mailable to those authorized persons identifiedaccording to the previously described method of providing identificationand will only be achieved after satisfactory correlation of thatauthorized person's biometric data collected at the place of access andthe biometric data stored in the corresponding database.

Preferably, information in relation to the identifiable sealing means isadded to the information contained in the database in respect of thearticle to which the sealing means is applied. It is also preferred thatsuch information includes the unique seal description and that it isentered as an add-on file. Such add-on file may be superseded by lateradd-on files, although it is preferred that all current and noncurrentadd-on files are maintained in the database for audit purposes. However,the sealing means may be utilized with a non-identified article and, insuch case, information in respect of the sealing means may be added to adatabase in respect of the shipping agent or some other suitabledatabase.

An add-on file may include information in respect of an article and aparticular shipping movement. For example, in the case of the articlebeing a shipping container, the information may include details on thepersonnel who packed the container, the time and date packed, thedeparture station, the arrival station etc, and the contents of thecontainer. Such information may be added directly by authorizedpersonnel.

Furthermore, the database may include information in respect of theidentifiable sealing means such as its time and place of issue,individual or firm to whom it was issued, shipping agent code or othersimilar information important for audit purposes. Preferably suchinformation is also entered by authorized personnel only.

Checking for correlation with the information in the database mayinclude visual checking of the sealing means and or article butpreferably checking is carried out from a remote monitoring area.

The localized monitoring area may be a monitoring station located atpacking, manufacturing or dispatch area, departure port or destinationport or any other suitable station and the packet of data may beretrieved at one or more monitoring stations.

In one form of the invention wherein a group of many shipping containersor other freightable articles is transported by a single transportvehicle such as a ship or train, a packet of data comprising informationin respect of each container in the group may be compiled at thedeparture port or other suitable compiling station by accessing thedatabase in respect of each container. Such packet of data may betemporarily stored and retrieved for comparison with departingcontainers and also transmitted to the destination port for comparisonwith the containers as they arrive. Prefer-ably, the packet of data istransmitted in an encrypted form so as to prevent interference fromunauthorized persons.

Advantageously, relatively large databases may be interrogated before orduring shipment to assemble a relatively small packet of data which maybe readily localized to permit almost instantaneous positiveidentification of articles in the group to be achieved and therebyfacilitate their movement across restricted borders.

The database may be an international database but preferably eachcountry maintains a national database containing information in respectof major articles such as shipping containers or vehicles registered inthat country.

In order that this invention may be more readily understood and put intopractical effect reference will now be made to the accompanying drawingswhich illustrate a preferred embodiment of the invention and wherein:

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 a is a pictorial representation of an identification cardaccording to the invention;

FIG. 1 b is a pictorial representation of another identification cardaccording to the invention;

FIG. 1 c is a pictorial representation of a container seal according tothe invention; and

FIG. 2 is a diagrammatic representation of a method of facilitatingtravel of authorized persons according to the invention; and

FIGS. 3 and 4 are diagrammatic representations of the interconnection ofrelevant functional areas and databases for the implementation of asystem according to the invention; and

FIG. 5 is a diagrammatic representation of a method of facilitatingmovement of motor vehicles according to the invention.

DETAILED DESCRIPTION

The radio frequency responsive identification card 10 illustrated inFIG. 1 a includes a wallet sized flexible plastic base layer 11 foldableabout a centrally located fold line 12 which divides the card into aninformation portion 13 and a validation portion 14. The informationportion 13 includes a circuitous antenna 15 embedded in the base layer11 for receiving signals. The antenna 15 is operatively connected to anentry transponder 16, a description transponder 17 and a validationtransponder 18. The validation transponder 18 is located on thevalidation portion 14, the connection thereto passing across the foldline 12 by conductive tracks 19 and 20. A time delay component 22 isarranged to create a time delay between receipt of a radio frequencysignal and transmission of a responding signal.

The transponders 16, 17 and 18 are arranged to report in sequence inresponse to a radio frequency signal transmitted from an adjacenttransmitting and receiving station.

The entry transponder 16 includes an entry key component 21 which isconfigured to transmit a reader station access code to the receivingstation, thereby alerting the receiving station of a valid signal part.The receiving station is thereby prepared for receiving further signalparts from transponders 16, 17 and 18. The component 21 effectivelyprevents the receiving station processing any signal which does notbegin with the access code. The transponder 16 also contains informationin respect of which database contains the individual's identificationfile.

The description transponder 17 is an integrated circuit which transmitsa signal indicative of the unique description assigned to the individualto whom the card was issued and an identification of the issuing stationwhich issued the card. The description transponder 17 transmits itssignal directly after transponder 16.

The transponder 18 is an integrated circuit containing a validation andencryption code. The encryption code is unique to the card andcooperates with the file location code such that the signal recorded bythe receiving station is a parcel of information with a uniqueidentifier which must be decoded by corresponding decoding meansassociated with the receiving station.

The radio frequency responsive identification card 10 illustrated inFIG. 1 b includes components as described in respect of FIG. 1 a.However, in this embodiment the validation portion circumscribes theinformation portion wherein the conductive tracks 19 and 20 effectivelysurround the antenna 15.

In use, the transmitting and receiving station typically located at boththe departure station and the arrival station, transmits an empoweringsignal at a particular frequency for a predetermined period of time. Allcards operating at that frequency and within the designated range orzone, such as by being carried by a single individual, may be activatedby the empowering signal. The identification card is activated by thesignal but, unlike the other cards, does not respond immediately becauseof the built-in response time delay. The length of the time delay is setto allow sufficient time for all cards likely to be activated at thesame frequency to transmit their messages so as to allow a signalsubsequently transmitted by the identification card to be identified andreceived clearly and uninterruptedly by the receiving station.

At the end of the designated time delay the entry transponder 16transmits its signal to the receiving station which then prepares toreceive a message signal from the description transponder 17 and avalidation signal from the validation transponder 18.

If the validation signal is received as expected, the encryption codeencompassed in the signal transmitted by validation responder 18,cooperates with the messages from transponders 16 and 17 to create anencrypted message which is received as a parcel of ready to sendinformation by the receiving station. If validation transponder 18 doesnot respond or indicates a discrepancy in the signal from thedescription transponder 17, then the message transmitted by transponder17 is unable to be encrypted by the unique encryption code carried bythe responder 18. However, the message is subsequently encrypted by anencryption code specific to the particular receiving station reading thecard. Accordingly, the message is prepared as a flagged parcel ofinformation providing an indication that the individual requires furtherinvestigation.

FIG. 1(c) illustrates a seal for a shipping container incorporating thecard of FIG. 1(b) in pursuance of the method illustrated in FIG. 5. Afailure of the validation responder or a discrepancy in the signal fromthe description transponder 17 indicates that the seal assembly has beenremoved or broken and that the container has possibly been accessed. Itwill be appreciated that the seal is a “use only once seal”. For thispurpose the seal includes a looping strip 27 for looping to thecontainer door and which is received in the knife edge slot 26. Asimilar looping strip 28 is provided for looping to the container body.Any attempts to open the door will damage the conductive tracks 19 and20 or the validation transponder 18 a. in an alternative embodiment thelooping strip 28 is replaced with a saddle including a slot similar toslot 26 and the connector strip 25 may pass through the slot 26 to lockabout the container door and the container body.

The facilitation of travel by authorized persons is illustratedschematically in FIGS. 2, 3 and 4 and is described hereinafter. Personswishing to travel internationally apply for and are issued anidentification card of the type described above. The card is issued by acard issuing station whereat the appropriate unique description isprogrammed into the card. Either at the same time or subsequently, thebiometric data of choice unique to each person and suitably a thermogramis prepared and stored (preferably in digital form) in the database ofthe file holding station at a file location designated by the uniquedescription. The thermogram is suitably of the type described in U.S.Pat. No. 5,163,094 to Prokowski.

The individual may subsequently indicate a desire to travel toAustralia. Such a desire for example, may be indicated by the purchaseof an airline ticket or making an application for a visa. Theindividual's identification card may be read at this time and theairline ticket would be issued in the name of the person to Whom thecard was issued.

At this time the individual's add-on file in the national database wouldbe updated to show that he is authorized to travel to Australia andremain there for a specified period of time. Upon updating of his add-onfile the individual may be issued with a suitable receipt or ticket forhis own benefit and record although such a receipt would not be used forany official purpose.

In a preferred embodiment the individual's thermogram or other biometricdata is retrieved from the database or prepared at this time and storedin a departure station database arranged to collate thermograms inrespect of individuals ticketed for each particular flight. Accordingly,information specific to each person as well as information in regard toauthorized length of visit and the like or other information enablingquick and easy access to that information in respect of each person on aparticular flight is prepared as a packet of identification data priorto the time of departure.

As passengers move towards the departure lounge or through the departuregates, for example, they are scanned by a remote scanner to create acontemporary thermogram which may be instantly compared with thethermogram previously loaded into the departure station database topositively identify each passenger.

Those passengers positively identified as authorized passengers by asufficient correlation between the contemporary thermogram and thedeparture station database thermogram are afforded an uninterruptedpassage to the departing aircraft. Those passengers in respect of whomthe correlation is below the requisite level are directed to adesignated area for further identification. This process is carried outfor all persons boarding the aircraft.

The departure station may also maintain a database of prohibited personswhich preferably is accessed for comparison with all passengers. Anyperson who is identified as a prohibited passenger maybe prevented fromboarding the aircraft.

At the same time or timely during the flight, the packet of informationdata containing all of the passenger data is transmitted to thedestination station where it is stored in the destination stationdatabase. Those persons not positively identified in the short periodbefore boarding and allowed to board are investigated further during therelatively long period in which the aircraft is in transit. Accordingly,those passengers for whom authorization is eventually established areprovided with easy entry to the destination airport and those who havenot been positively identified are detained for further identification.

At the destination airport all passengers proceed past a scanningstation where each passenger's identification card is read remotely,thereby enabling the stored thermogram for that card to be retrieved.Each passenger is coincidentally thermogrammed by a remote thermographicscanner focussed on the person carrying the sensed card. The thermogramsare compared and where a sufficient correlation is achieved such personsprogress to their destination without further interruption by officialsthrough selection gates which may be actuated by the monitoringequipment automatically. Suitably the selection gates unobtrusivelycapture unauthorized individuals for safe further investigation. Theadd-on database may be updated at this time automatically to record thearrival of each passenger in the destination country.

Alternatively the departure airport may package the informationcontained on the identification cards of individuals on a flight andsend this to the arrival destination which compiles the packet ofidentification data for their use to facilitate free passage of bonafide disembarking travelers.

Preferably each station which can access the database has an individualstation access code and each operator manning such a station has anindividual operator's code. Suitably this information is added to theadd-on only file each time an access is made or attempted, Suitably,authorization to access the database is provided in a similar mannerwherein biometric correlation is required. Accordingly, an audit trailof actions is maintained and a log of authorized movements of eachindividual is recorded in such a manner that a history report includingdetails of the operator updating the file can be established.

Foreign travelers in a host country need only carry their identificationcards. If queried as to whether they are authorized to be in theparticular country, they only need to accompany a government official toa reading station where a contemporary thermogram can be taken and wheretheir identification cards can be used to access the national databaseto retrieve each individual's thermogram and authorized travellingparticulars.

In addition to the foregoing, this invention could be used to monitorindividuals entering and exiting a secured area such as border crossingsor prisons. Furthermore, the method of providing identification may beutilized to establish the identity of persons undergoing medicaltreatment. For example, the database may include information in regardto medical condition, blood group or the like and such information maybe utilized by hospital staff upon receipt of confirmation of an injuredperson's identity rather than performing on the spot blood tests todetermine that person's blood group. Advantageously, such method willsave time. Alternatively, a medical practitioner could prescribe drugsor treatment to a distant patient upon establishment of the patient'sidentity by the foregoing method secure in the knowledge that theperson's identity has been correctly established.

The facilitation of movement of shipping containers or motor vehicles isillustrated schematically in FIG. 5. The term biometric, date as used inrelation to the freightable articles means an identifiable attributespecific to the article such as a surface image.

Entities wishing to export on a regular basis will be required to makeapplication to become authorized exporters. On approval of suchapplication all personnel employed by the authorized entity will beissued with a personal identification device as previously described.Information in respect of the preparation, packaging and contents ofindividual parcels to be shipped in a shipping container will be enteredinto the add on file in respect of that particular container which willbe identified according to the method previously described. Uponclosure, the container will be sealed with a seal assembly as previouslydescribed which has been issued to the authorized entity by an officialissuing authority. Details of the seal may be entered into the databaseand married with the identification data in respect of the container asan add-on file. If the container is a non-identified container, then theseal details will be married with details of the shipping entity. Thesame process will be carried out by all authorized exporting entities.

Containers arriving at a shipping station will be remotely scanned tocheck for any unauthorized access to each container between thedispatching station of the exporting entity and the shipping station andalso for any damage to the seal.

Information in respect of all containers to be loaded on a particularship will be compiled to form a package of data which will betransmitted to the destination port.

At the destination port, the containers will be unloaded and scannedautomatically to determine if the seals have been damaged. The seals andthe identification data will be compared with the transmitted packet ofdata. Visual checking to determine whether the containers have beenentered by removal of a remote wall panel of the container may also becarried out. A plurality of sealing assemblies may be applied tosuitable parts of the container if necessary.

Those containers positively identified (i.e. with a suitable correlationbetween the transmitted data and the data obtained at the destination)and having the seal intact (that is the seal sends a valid signal), willbe directed from the destination port without further checking However,those containers which are either not positively identified or whoseseal assemblies do not provide a valid signal will be directed to achecking station for further investigation.

By use of this method, freight forwarded by bona fide exporting entitieswill be afforded an uninterrupted passage unless an unauthorized partyhas gained access to the container during shipment or a seal has beenaccidentally damaged. The method therefore is expected to improve theefficiency of freight movement.

Of course separate parts of the system disclosed herein may be usedadvantageously where cost or other considerations do not warrant fullutilization of the apparatus or method of the invention as describedabove. However it will of course be realized that the above has beengiven only by way of illustrative example of the invention and that allsuch modifications and variations thereto as would be apparent topersons skilled in the art are deemed to fall within the broad scope andambit of the invention as is herein set forth.

1. A method of providing identification of an individual, said methodcomprising: maintaining a database of identification data each includingat least one type of non-invasively determinable biometric attributecapable of distinguishing respective individuals, some of theindividuals being restricted individuals, to enable identification of anindividual by means of the identification data; providing each of saididentification data with a unique description; providing identificationmeans for carriage by each said individual and containing the uniquedescription; providing a receiving station in communication with saiddatabase, the receiving station determining at least one non-invasivelydeterminable biometric attribute of said individual of a type stored bysaid database, reading the unique description contained in theidentification means carried by said individual, accessing the databaseto determine the identification data corresponding to the uniquedescription, comparing the attribute determined by the receiving stationwith the corresponding attribute included in said identification data onsaid database, and interrupting the progress of the individual if asufficient correlation between the attribute determined by the receivingstation and the attribute on said database is not found; wherein saidunique description is selected and encrypted so that it cannot yieldsaid identification data by unauthorized processing or de-encryptionthereby to render the identification means of no value to a person otherthan the person to whom the identification means is issued, and whereinsaid identification means further includes validation means arranged todetect tampering with the unique description for outputting a validationsignal indicative of whether there has been tampering, and a transponderfor transmitting the unique encrypted description and the validationsignal, and wherein said receiving station is adapted to trigger thetransponder to transmit the unique encrypted description and saidvalidation signal, and to flag a failure to verify by said validationmeans so as to interrupt the progress of the individual.
 2. The methodof claim 1, wherein said individual is a human.
 3. The method of claim 1wherein said identification means further includes distinguishing meansincluding a built-in time delay for delaying the transmission of thesignal, by which a receiving station can distinguish the identificationdevice from other radio frequency responsive devices.
 4. The method ofclaim 3, including access means adapted to provide signal access to thereceiving station.
 5. The method of claim 4, wherein the access meansincludes a specific signal stream.
 6. The method of claim 3, whereinsaid identification device further includes an encryption key responsiveto said delay wherein encrypted information transmitted from theidentification device to a receiving station may be understood only by areceiving station utilizing means suitable for decoding the encryptedinformation.
 7. The method of claim 1, wherein said identification meanscomprises: a) an identification smart card when said individual is ahuman, and b) a smart, tamper evident baggage tag when said individualis a freightable article.
 8. The method of claim 7, wherein said cardincludes a surface having a pattern or ornamentation applied to a faceof the card and adapted to be read by an image reader.
 9. A method ofproviding identification of an individual, comprising the steps of: a)maintaining a database of identification data each including at leastone type of noninvasively determinable biometric attribute capable ofdistinguishing respective individuals, some of the individuals beingrestricted individuals, to enable identification of an individual bymeans of the identification data, b) providing each of saididentification data with a unique description, c) providingidentification means for carriage by each said individual and containingthe unique description, d) providing a receiving station incommunication with said database, the receiving station: i) determiningat least one non-invasively determinable biometric attribute of saidindividual of a type stored by said database, ii) reading the uniquedescription contained in the identification means carried by saidindividual, iii) accessing the database to determine the identificationdata corresponding to the unique description, iv) comparing theattribute determined by the receiving station with the correspondingattribute included in said identification data on said database, and v)interrupting the progress of the individual if a sufficient correlationbetween the attribute determined by the receiving station and theattribute on said database is not found, wherein said unique descriptionis selected and encrypted so that it cannot yield said identificationdata by unauthorized processing or de-encryption thereby to render theidentification means of no value to a person other than to person towhom the identification means is issued, said identification meansfurther including validation means arranged to detect tampering with theunique description for outputting validation data indicative of whetherthere has been tampering, and said identification means being remotelymachine readable by said receiving station allowing the unique encrypteddescription and the validation data to be retrieved thereby, saidreceiving station being adapted to flag failure to verify by saidvalidation data so as to interrupt the progress of the individual.